What we collect
- Account data — e-mail, display name, optionally country and phone (kept only so a payment receipt can be issued).
- Payment data — order number, on-chain transaction hash, and the payment processor's status. We never store your card number (card payments run through Stripe's hosted checkout) and we never ask for or store a wallet seed phrase or private key.
- Technical logs — request IP, browser user-agent, and the fragment of any request the firewall blocked. Used for security auditing only, retained 30–180 days.
What we do not collect
No ad trackers, no third-party analytics scripts, no selling of data, no cross-site profiling.
Cookies
Two categories only: the session cookie that keeps you logged in (HttpOnly + SameSite=Lax), and a local preference entry that remembers language and theme. There is no advertising cookie.
Why we keep your e-mail
Your e-mail address is burned into every PDF you download. That is deliberate: it is what turns a disputed chargeback or a leaked file into a traceable event instead of an unexplainable line in a spreadsheet. We do not publish it, and it never appears in the file you forward.
Your rights
Update or delete your profile from your account area at any time, or write in and ask for account deletion together with every balance record. Once deleted, PDFs you already generated can no longer be re-downloaded.
Where the data lives
The database sits on our own server as a single SQLite file — no third-party SaaS holds your records. Payments settle through Stripe or on the TRC20 public chain; on-chain records cannot be deleted or edited.
Contact
Privacy questions go through Contact us in your account area. Reply within 7 working days.